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REMARKS 

Applicants have reviewed the Office Action mailed October 4, 2006, and have amended 
claims 1, 3, 7-12 and 14-22 and canceled claims 6 and 13. Claims 1-5, 7-12 and 14-22 are 
pending, and Applicants request reconsideration in view of the amendments and the following 
remarks. 

Claim Rejections— 35 U.S.C. §§ 102 and 103 

The Examiner rejected claims 1-10, 12-17 and 19-22 under 35 U.S.C. § 102(e) as being 
anticipated by U.S. Patent No. 6,487,552 ("Lei"), and claims 1 1 and 18 under 35 U.S.C. § 103(a) 
as being unpatentable over Lei in view of Official Notice. Applicants have amended 
independent claims 1, 12, 19, 20, 21 and 22; as indicated above, claims 6 and 13 have been 
canceled. 

Applicants submit that each of the independent claims 1, 12, 19, 20, 21 and 22 are 
patentable over Lei, as are the corresponding dependent claims. Support for the claim 
amendments can be found throughout the originally filed specification, including, for example, at 
page 2, lines 21-22; page 3, lines 16-27; page 5, lines 28-31; page 6, lines 13-15; page 8, lines 2- 
4, 8-1 1, and 22-23; page 9, line 7-8, 12-14 and 1 8-19; and in FIG. 1 . Accordingly, no new 
matter has been added. 

Independent claim 1 has been amended to recite a method that includes receiving a query 
for information in a manner that identifies which one of multiple knowledge bases that stores the 
information. Amended independent claim 1 further recites building a search request that 
contains a security pattern obtained from a security service that is configured to control access to 
information in each of the multiple knowledge bases. The security pattern is generated by 
retrieving a security strategy associated with the identified knowledge base, where the security 
strategy identifies one or more control entities that are authorized to access the identified 
knowledge base; retrieving a security profile corresponding to each of the one or more control 
entities, where each security profile includes an attribute; and generating the security pattern 
from attributes in the one or more retrieved security profiles. 
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Lei generally describes "controlling access to information within database management 
systems." (Lei, col. 1, lines 7-8). In particular, Lei describes "a session between a database 
client and database server" and "dynamically attaching predicates to queries [in the session], . . 
based on a policy" (col. 4, lines 39-44), which may in turn be "based on the current state of the 
user session." (Col. 16, lines 29-30). 

Lei does not anticipate amended independent claim 1 . For example, Lei does not 
describe or suggest a security service that is configured to control access to information in each 
of multiple knowledge bases. As another example, Lei does not describe or suggest receiving a 
query for information in a manner that identifies which one of multiple knowledge bases that 
stores the information. As another example, Lei does not describe or suggest obtaining a 
security profile by a) retrieving a security strategy associated with the identified knowledge base, 
where the security strategy identifies one or more control entities that are authorized to access 
the identified knowledge base; b) retrieving a security profile corresponding to each of the one or 
more control entities, each such security profile including an attribute; and c) generating the 
security pattern from attributes in the one or more retrieved security profiles. 

Lei also does not render claim 1 obvious. In particular, Lei describes and illustrates a 
system that controls access to a single database (e.g., database 202, illustrated in FIG. 2), in a 
particular way. Lei's system would not work in an environment of multiple knowledge bases. 
Moreover, Applicants have claimed methods for managing access to multiple different 
knowledge bases from one central location, where access controls can be easily maintained and 
modified using security strategies that can be associated with specific knowledge bases and 
security profiles that correspond to control entities included in the security strategies. Lei does 
not describe or suggest the security strategies or security profiles recited in Applicants' amended 
claims, and Lei's system cannot provide easy-to-maintain, centralized access control for multiple 
knowledge bases. 

Accordingly, for at least the reasons outlined above, Applicants respectfully submit that 
amended independent claim 1 and the corresponding dependent claims 2-5 and 7-1 1 are 
patentable over Lei and ask that the Examiner withdraw the rejections based on Lei. Amended 



Applicant 
Serial No. 
Filed 
Page 



Wu et al. 
10/780,173 
February 17, 2004 
lOof 11 



Attorney's Docket No.: 13906-139001 / 2003P0061 1 US01 



independent claims 12, 19, 20, 21 and 22 recite similar language as that discussed above with 
respect to amended independent claim 1. Accordingly, amended independent claims 12, 19, 20, 
21 and 22 are believed to be patentable over Lei for substantially the same reasons provided 
above with reference to amended independent claim 1 . Applicants ask for the withdrawal of the 
rejection based on Lei of amended independent claims 12, 19, 20, 21 and 22 and of the 
corresponding dependent claims 14-18. 



Applicants respectfully submit that pending claims 1-5, 7-12 and 14-22 are in condition 
for allowance and request that the Examiner allow them. 

It is believed that all of the pending claims have been addressed. However, the absence 
of a reply to a specific rejection, issue or comment does not signify agreement with or 
concession of that rejection, issue or comment. In addition, because the arguments made above 
may not be exhaustive, there may be reasons for patentability of any or all pending claims (or 
other claims) that have not been expressed. Finally, nothing in this paper should be construed as 
an intent to concede any issue with regard to any claim, except as specifically stated in this 
paper, and the amendment of any claim does not necessarily signify concession of 
unpatentability of the claim prior to its amendment. 



Conclusion 
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This response is accompanied by a Supplemental Information Disclosure Statement, a 
Petition for One-Month Extension of Time and the corresponding fees. TMo other fee is believed 
due in connection with this submission. Please apply any other charges or credits to deposit 
account 06-1050. 

Respectfully submitted, 
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